Mobile Wallet Recovery: What Happens When You Lose the Phone

Recovery is the feature nobody tests until they need it. We tested it deliberately, by wiping devices and restoring.

The method

Set up a wallet, fund it with a small amount, record the first receiving address, wipe the device entirely, install fresh, and restore from the written phrase.

Then check whether the address matches and the balance appears.

What we found

Most wallets restored cleanly. Enter the phrase, wait, balance appears.

One required selecting the derivation path manually. The default produced an empty wallet. Nothing was lost and the experience would be genuinely alarming for someone who had not read about derivation paths.

One did not restore custom token entries. The balance was there and the tokens were invisible until each was added again manually, which produced a few minutes of believing funds had disappeared.

One handled the optional passphrase poorly, in that entering nothing produced a different wallet with no indication that a passphrase had been set originally.

That last case is the one that turns a recoverable situation into an unrecoverable one for anyone who does not know a passphrase exists.

What this means

The recovery phrase is the standard. Most wallets implement it correctly.

The failure modes are in the details around it: derivation path defaults, token visibility, passphrase handling. None of them destroy funds and all of them produce a period of believing funds are gone, which leads people to make bad decisions.

The documentation habit

Record, alongside the phrase, in a document with no secrets in it:

The wallet application used. The derivation path if non-standard. Whether a passphrase exists. The first receiving address of each account.

Those four lines convert every failure we encountered into a five-minute fix.

The test itself

Do it before funding, and repeat annually.

It takes ten minutes and it catches transcription errors, path mismatches and forgotten passphrases while all three are still fixable. We have written up a case where a reader lost a mid four-figure amount to exactly the category of problem this test catches.

For the balance you are not self-custodying

Recovery at a venue is an identity-verification process rather than a cryptographic one, which is a completely different failure model with a support desk attached.

That is a genuine advantage for a working balance, and it is why we keep ours at the exchange used for the withdrawal test rather than holding everything in one model.